chore(sync): adopt canonical fleet tsconfig.base.json + scaffolding

Cascades the fleet-canonical tsconfig.base.json flipping 8 strict flags
that vscode-socket-security previously kept lax (noUnusedLocals,
noUnusedParameters, noPropertyAccessFromIndexSignature,
noUncheckedIndexedAccess, verbatimModuleSyntax, exactOptionalPropertyTypes,
erasableSyntaxOnly, sourceMap). Repo-specific exceptions move to the
concrete config in a follow-up commit.

Also cascades drifted hook code, oxlint/oxfmt configs, gitattributes,
bypass-phrases docs, and validate-config-paths.

Author: jdalton

.claude/hooks/no-revert-guard/index.mts

@@ -54,9 +54,12 @@
     "**/.git-hooks/**",
     "**/.husky/**",
     "**/.pnpm-store/**",
+    "**/vendor/**",
+    "**/wasm_exec.js",
     "**/.config/lockstep.schema.json",
     "**/.config/socket-wheelhouse-schema.json",
     "**/.config/taze.config.mts",
+    "**/.config/tsconfig.base.json",
     "**/packages/build-infra/lib/release-checksums/consumer.mts",
     "**/packages/build-infra/lib/release-checksums/core.mts",
     "**/packages/build-infra/lib/release-checksums/producer.mts",

.claude/hooks/no-revert-guard/test/index.test.mts

@@ -113,9 +113,12 @@
     "**/.git-hooks/**",
     "**/.husky/**",
     "**/.pnpm-store/**",
+    "**/vendor/**",
+    "**/wasm_exec.js",
     "**/.config/lockstep.schema.json",
     "**/.config/socket-wheelhouse-schema.json",
     "**/.config/taze.config.mts",
+    "**/.config/tsconfig.base.json",
     "**/packages/build-infra/lib/release-checksums/consumer.mts",
     "**/packages/build-infra/lib/release-checksums/core.mts",
     "**/packages/build-infra/lib/release-checksums/producer.mts",

.config/oxfmtrc.json

@@ -163,6 +163,7 @@
 .config/rolldown/lib-stub.mts linguist-generated=true
 .config/socket-wheelhouse-schema.json linguist-generated=true
 .config/taze.config.mts linguist-generated=true
+.config/tsconfig.base.json linguist-generated=true
 .git-hooks/_helpers.mts linguist-generated=true
 .git-hooks/commit-msg.mts linguist-generated=true
 .git-hooks/pre-commit.mts linguist-generated=true